Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
File:                     QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft (raw, json)
Hash identifier:          GXh0pDuhoI571Ht7GgwbPkJneMl6c7seYU3k6K7VUO8=
Subject key identifier:   22:AD:CB:27:A7:A6:38:AE:D1:82:F3:B9:43:34:4F:66:52:27:BB:AC
Authority key identifier: 40:D5:59:1A:75:BD:69:3E:9D:3B:76:68:34:BF:07:4F:7B:1E:EE:3A
Certificate issuer:       /CN=40d5591a75bd693e9d3b766834bf074f7b1eee3a
Certificate serial:       019239CAEC341E6C0A26B3F9A0993AF99928
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
Manifest number:          06EA
Signing time:             Sat 28 Sep 2024 18:00:52 +0000
Manifest this update:     Sat 28 Sep 2024 18:00:52 +0000
Manifest next update:     Sun 29 Sep 2024 18:00:52 +0000
Files and hashes:         1: QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl (hash: FpgzVrRw/GwzjHe8FgowDhoxU5JdS8aXMOwr1l0mB8I=)
                          2: gH3el4hhzwfJm3GZyIB_YYZS7WU.roa (hash: UjId64fFfNjoY8A9qUAk3UGVwvEtwNTz/+nPxCuS9yk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:ca:ec:34:1e:6c:0a:26:b3:f9:a0:99:3a:f9:99:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40d5591a75bd693e9d3b766834bf074f7b1eee3a
        Validity
            Not Before: Sep 28 18:00:52 2024 GMT
            Not After : Sep 29 18:00:52 2024 GMT
        Subject: CN=22adcb27a7a638aed182f3b943344f665227bbac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ba:fa:62:1e:2e:88:78:06:53:57:29:51:c9:
                    d6:9e:bd:e0:f6:fc:48:9c:b2:a0:20:fd:e0:3a:76:
                    9d:a9:05:6e:bb:34:65:a7:39:d3:a5:49:45:43:e4:
                    ef:43:c6:8d:f3:69:03:bf:77:cf:7c:bb:8e:11:17:
                    76:0b:56:e0:bd:43:1c:53:89:2d:d5:49:87:9a:99:
                    bc:ad:9e:6a:46:4a:9f:4c:f5:ed:a3:ae:79:12:1a:
                    5f:e3:5d:85:ea:e7:0b:51:55:31:5a:b7:60:0e:91:
                    71:37:bb:c7:0f:fd:b6:28:f3:e9:9f:84:8c:ce:2f:
                    78:b5:90:e1:b5:dd:69:a2:a1:b6:c6:70:52:83:c0:
                    37:d6:17:e9:3d:bc:b0:f9:23:f5:27:0b:4d:31:48:
                    75:e9:ae:18:c8:58:4b:e3:79:16:dc:76:3a:89:2f:
                    a6:f9:f2:12:05:df:9a:96:e3:40:1d:a6:4e:ee:90:
                    20:40:d8:68:77:61:24:a9:aa:67:1a:af:fa:bf:f1:
                    91:d5:68:f7:14:1d:16:b2:58:d0:04:5a:d5:37:c7:
                    ae:9d:58:fc:e3:b4:2e:fe:34:77:db:a8:c1:cf:aa:
                    c0:6b:83:ac:72:f3:b8:5d:1f:d6:d6:b8:5b:d3:b5:
                    4b:91:c6:a2:f7:3a:bc:40:e9:18:e9:37:d1:36:b1:
                    c8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:AD:CB:27:A7:A6:38:AE:D1:82:F3:B9:43:34:4F:66:52:27:BB:AC
            X509v3 Authority Key Identifier:
                keyid:40:D5:59:1A:75:BD:69:3E:9D:3B:76:68:34:BF:07:4F:7B:1E:EE:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a3:40:90:21:0e:3e:bf:c5:f0:3a:0c:c3:17:53:f2:30:e7:
         e4:ab:b7:9d:c2:b4:28:9d:5a:fb:09:98:de:f4:2a:10:56:44:
         d6:ad:df:4c:d3:3c:91:c2:ad:be:e3:d6:89:79:3e:97:0d:a4:
         5d:33:48:e8:74:86:2b:28:a2:58:68:51:ec:43:8e:fa:77:41:
         e3:4a:3f:50:d8:44:e8:4d:97:d7:8a:10:93:11:30:76:20:7f:
         67:8f:c2:f9:a5:f6:67:62:60:8d:29:42:c1:13:4c:9e:72:63:
         a3:9b:f6:5f:a6:b9:94:4e:c9:75:fe:e1:fc:98:c5:70:76:72:
         6f:f6:3f:b6:62:20:03:66:63:d3:e6:44:c1:de:20:11:11:4b:
         fc:6f:4e:7b:5d:db:bc:82:c7:e5:b0:be:39:75:8d:f6:fa:26:
         18:71:51:2e:75:52:d7:eb:5c:6f:53:28:f0:68:3b:98:ad:c7:
         cc:02:17:59:d7:4b:b9:40:e9:84:23:fc:0a:15:b4:ab:3e:ab:
         89:63:9f:9f:4f:52:ed:9e:a5:d8:87:6b:44:20:19:d2:13:47:
         d2:6c:0a:44:4c:7f:17:c5:ec:a4:8d:8b:2a:f8:ad:96:f5:49:
         66:1a:4c:28:89:03:ac:6e:c3:10:39:5a:fe:3e:7c:a6:61:7e:
         79:24:29:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:21:10 2024 by rpki-client on console-fra.rpki-client.org